SweClockers.com Hack Exposes 254,867 User Credentials
What Happened
In early 2015 the Swedish technology‑news site SweClockers.com was compromised. Attackers extracted the user database, leaking 254,867 records that included usernames, email addresses and salted password hashes generated with a mixed MD5 / SHA‑512 scheme.
Why It Matters for Compliance & Audit Readiness
- Demonstrates the need for continuous control‑assurance around credential storage — regularly validate hashing algorithms and enforce strong, unique salts.
- Highlights the importance of documented incident‑response playbooks that capture evidence, preserve chain‑of‑custody and support audit trails.
- Shows how a robust vendor‑risk program can surface legacy authentication practices before they become a compliance liability.
Who Is Affected
- Technology news and community portals (especially those built on legacy CMS platforms).
- Any organization that re‑uses similar password‑hashing methods.
- End‑users whose personal identifiers (email, username) were disclosed.
Recommended Actions
- Conduct an immediate inventory of all systems storing credentials; verify that modern, adaptive hashing (e.g., Argon2, bcrypt, scrypt) is in use.
- Review and tighten monitoring for unauthorized database access or anomalous export activity.
- Request a detailed incident‑response report from the site operator and update your own breach‑notification procedures accordingly.
Technical Notes
- Attack vector: Web‑application compromise leading to credential‑database extraction.
- CVE(s): None publicly disclosed for this specific breach.
- Data types exposed: Usernames, email addresses, salted password hashes (MD5 + SHA‑512).
Source: https://haveibeenpwned.com/api/v3/breach/SweClockers